01
Visibility
Do you have a current tenant-wide inventory of apps, flows and agents?
Owners, usage and critical resources should be visible centrally rather than reconstructed from manual spreadsheets.
Power Platform Governance Readiness 2026
Get more than a maturity score. The assessment highlights your three weakest governance areas and gives a concrete next step for each one.
02
Environment strategy
Is there a documented purpose and lifecycle for environments?
The role, creation and retirement of default, development, test and production environments should be explicit.
03
Managed governance
Are important controls centrally enforced for supported environments?
Managed Environments and environment-group rules can enforce relevant settings consistently across larger estates.
04
Data & connector policy
Does a deliberate data-policy strategy cover every relevant environment?
Connector and data-flow boundaries should operate as defined tenant- or environment-level guardrails.
05
ALM & deployment
Do production solutions reach live environments through a controlled, solution-aware deployment process?
Repeatable releases, environment variables and connection references should replace manual import/export and post-deployment rewiring.
06
Ownership
Does every business-critical solution have both a business and a technical owner?
Support responsibility and ownership transfer should be defined before a maker changes role or leaves.
07
Connections & identities
Are critical connections and runtime identities independent from accidental personal-account dependencies?
For supported production solutions, document which identity runs what, who can recover it and how ownership is transferred.
08
Monitoring
Can you proactively see errors, usage and operational health for critical solutions?
Critical systems need a central health/usage view and defined alert or incident path rather than manual run-history checks.
09
Intake & support model
Is there a rule for when a maker solution becomes a supported business system?
Experimental apps, team solutions and business-critical systems should not all run under the same control model.
10
Review & remediation
Do inventory and governance insights turn into actual remediation work?
Orphaned, inactive, policy-violating or risky resources need an owner, deadline and closure rule.
11
CoE operating model
Are CoE/governance responsibilities defined as an operating model rather than tied to one toolkit?
In 2026, native Admin Center capabilities should be the baseline; custom components should remain only where they serve a real operating need.
12
Agents & AI
Does the governance model also cover agents and AI capabilities?
Define sharing, access, connector boundaries, AI settings and which capabilities are allowed in which environments.